GHSA-3cwm-7jmm-774w
- Source
- https://github.com/advisories/GHSA-3cwm-7jmm-774w
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-3cwm-7jmm-774w/GHSA-3cwm-7jmm-774w.json
- Aliases
-
- CVE-2013-7489
- PYSEC-2020-216
- Published
- 2022-05-05T00:29:41Z
- Modified
- 2023-11-08T03:57:29.728434Z
- Details
-
The Beaker library through 1.11.0 for Python is affected by deserialization of untrusted data, which could lead to arbitrary code execution.
- References
-
- https://nvd.nist.gov/vuln/detail/CVE-2013-7489
- https://github.com/bbangert/beaker/issues/191
- https://bugzilla.redhat.com/show_bug.cgi?id=1850105
- https://github.com/advisories/GHSA-3cwm-7jmm-774w
- https://github.com/bbangert/beaker
- https://github.com/pypa/advisory-database/tree/main/vulns/beaker/PYSEC-2020-216.yaml
- https://www.openwall.com/lists/oss-security/2020/05/14/11
Affected packages
PyPI / beaker
Package
- Name
- beaker
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0The exact introduced commit is unknownLast affected1.11.0
Affected versions
0.*
0.5
0.6
0.6.1
0.6.2
0.6.3
0.7
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.8
0.8.1
0.9
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
1.*
1.0
1.0.1
1.0.2
1.0.3
1.1
1.1.1
1.1.2
1.1.3
1.2
1.2.1
1.2.2
1.2.3
1.3
1.3.1dev
1.3.1
1.4
1.4.1
1.4.2
1.4.3
1.5
1.5.1
1.5.2
1.5.3
1.5.4
1.6
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.6.5.post1
1.7.0dev
1.7.0
1.8.0
1.8.1
1.9.0
1.9.1
1.10.0
1.10.1
1.11.0